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Abstract 

We construct two families of binary quadratic bent functions in a combinatorial way. 
They are self-dual and anti-self-dual quadratic bent functions, respectively, which are not 
of the Maiorana-McFarland type. 

Keywords Bent function, combinatorics, quadratic function, self-dual bent function. 
Mathematics Subject Classification (2000) 94C30; 94C10 

1 Introduction 

Let ¥ q be the Galois field of order q = 2 m . We use the standard notation [n, k, d] for a binary 
linear code C of length n, dimension k and minimum (Hamming) distance d. Denote by wt(x) 
the Hamming weight of a vector x from F£. For x, y G F 2 denote by x-y the usual inner product 
over F 2 . Denote by x the complementary vector of x (obtained by swapping and 1). 
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Let m > 2 be an integer and j G {0, 1, 2, 3}. Denote by S(J) m the following sum: 

suu= E (I)- d) 

fc=0,...,m: fe=j (mod 4) 

Denote by S^ii,^)™ the value S(ii,i2) m — S(h)m + Sfa)™, for any two different ii and 22 from 
{0, 1,2,3}. The next proposition was used in [2] and gives all the values S(j) m and, hence, the 
values of all the sums S(ii,i 2 )m, which we will use later. 



Proposition 1.1 p| For any m > 2 denote B m = 2 s 1 , where s = ■ Then, the values of 
S(j) m depending on m = 0, 1, 2, 3, 4, 5, 6, 7 (mod 8) are, respectively: 



S(0) m 


= B li + B m 


2BI 


+ B m 


B m 


1BI 


- B m 


B 2 m - B m 


1BI 


- B m 




2Bi 


+ B m 


S(l) m 


= Bl 


2BI 


+ B rn 


Bin + Bm 


1BI 


+ B m 


B 2 m 


2B 2 m 


— B m 


B 2 m ~ B m 


2B 2 m 


— B rn 






2B 2 m 


- B m 


B„ 


2B? n 


+ B m 


B 2 m + B m 


2BI 


+ B m 




Ml 


- B m 


S (3) m 


- Bl 


2*° 


— B m 


B 2 m - B m 


ZBl 


— B m 


B 2 m 


1BI 


+ B m 


B 2 m + B m 


IBl 


+ B m 



A boolean function f in m variables is any map from F™ to F 2 . The weight of a boolean 
function / denoted by wt(/) is the Hamming weight of the binary vector of the values of /, 
i.e., the number of x G F™ such that /(x) = 1. For any boolean function / we define its 
Walsh-Hadamard transform F, such that 



F(a) = (-l) /(x)+aoc , Va G F™. (2) 

x€F™ 

For even m, a boolean function / over F™ is bent if its Walsh-Hadamard transform is F(y) = 
±2 m / 2 , for all y G F™. 

Two boolean functions /, g are affine equivalent if there exists a linear map A G GL(m,¥2), 
b, c G F™ and e G F2 such thatg(x) = f(A(x.) + b) + c-x + e, where c-x is the inner product of 
c and x. 

It is well known that the Walsh-Hadamard transform F of a bent function / defines a new 
bent function /, such that F(y) = 2 m / 2 (— l)^ y ). The function / is called the dual of / and it is 
fulfilled that f — f- We take the following definitions from [3]. 

Definition 1.2 [3] A bent function f is called self-dual, if it is equal to its dual. It is called 
anti- self- dual, if it is equal to the complement of its dual. 
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In this quoted paper [3], all self-dual bent functions in m < 6 variables and all quadratic 
such functions in m < 8 variables are characterized, up to a restricted form of affine equivalence. 
Later, Hou j5] classified all self-dual and anti-self-dual quadratic bent functions under the action 
of the orthogonal group 0(m, F 2 ). 

A general class of bent functions is the Maiorana-McFarland class, that is, functions of the 
form 

x-<p(y) + g(y), (3) 

where x, y are binary vectors of length m/2, ip is any permutation in FIT 7 ' 2 , and g is an arbitrary 
boolean function. 

One of the open questions concerning self-dual bent and anti-self-dual bent functions is the 
following one, quoted in [3]: are there quadratic self-dual (anti- self- dual) bent functions which 
are not of Maiorana-McFarland type ? 

In the present paper we give infinite families of self-dual and anti-self-dual quadratic bent 
functions which are not of the Maiorana-McFarland type. Since our class of bent functions 
includes not only self-dual and anti-self-dual quadratic bent functions we think that our class of 
bent functions is interesting itself and also from the point of view of secondary constructions [3] . 
The material is organized as follows. In Section [T] we introduce the topic and give notations and 
preliminary results. Section |2] contains the new constructions of quadratic bent functions and 
the main results of the paper. 

2 A combinatorial construction of new bent functions 

Throughout this section we assume that m is even. 
Denote by H m the parity check matrix of the binary 

Hamming code of length n = 2 m — 1 and by denote the matrix obtained from H m by 
adding one zero column. 

For a given even m > 4 and any ii,i 2 £ {0,1,2,3}, where i\ ^ ii, denote by v^,^ = 
(vo,Vi, ...,f n _i) the binary vector whose j-th position Vj is a function of the value of weight of 
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the column hj in H^. 



1, if wt(hj) = i\ or i 2 (mod 4) 
0, otherwise. 



The next result is part of a proposition in [2] and proved there. 

Proposition 2.1 fj^ Let m be even and let 7-L* m be an extended Hamming code of length 2 m . 
Then, the values of weights of vectors in the coset Vi 1; i 2 + ('H^ n ) ± are 2 m ~ 1 ± 2 ! %~~ 1 , if and only 
if h — ^2 = 1 (mod 2). 

For a given even m > 4 and any i\, i 2 G {0, 1, 2, 3}, where i\ 7^ 12, define the boolean function 
f h) i 2 over as: 

1, if wt(x) = i\ or i 2 (mod 4) 
0, otherwise. 
Now we state one of the main results of the present paper. 



fh,h ( x ) 



Theorem 2.2 For any even m, m > 4 the function fi lt i 2 is a bent function if and only if 
i 1 — i 2 = l (mod 2). In these cases, when fi lt i 2 is a bent function it is a quadratic bent function. 

Proof. From Proposition 12.11 the function /j l i2 is bent if and only if i± — i 2 = 1 (mod 2). 
Now, we show that all these bent functions are quadratic. Specifically, 

f2,3(xi,x 2 , ■ ■ ■ ,x m ) = 2J x i x i (mod 2) 

l<i<j <m 

X i+ XiX 3 ( mod2 ) 

l<i<m l<*<i<"^ 

/o,i(^i,^2, ...,x m ) = l + f 2 ,3(xi,x 2 , ...,x m ) (mod 2) 
/o,3(^i, x 2 , . . . , x m ) = 1 + fi,2{xi, x 2 , x m ) (mod 2) 



To prove the first equality is equivalent to prove that (™) = 1 (mod 2) if and only if w = {2, 3} 
(mod 4), where w is an integer number, < w < m. Hence, it is enough to prove that for 
w E {0, 1, 2, 3}, we have (2) = 1 (mod 2) if and only if w G {2, 3}, which is clear. 
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The second equality is reduced to prove that for w G {0, 1, 2, 3}, we have w+ (™) = 1 (mod 2) 
if and only if w G {1, 2}, which is also clear. 

The last two equalities come from the two first. 

Following [U Ch. 15, §2], we can write a quadratic boolean function as /(x) = xQx T + Lx + e 
and, for the above functions we have: 

/ 2 , 3 (x) = xQx T , 
/ 1)2 (x) =xQx T + Lx T , 

(4) 

/o,i(x) = xQx T + e, 
/ 0)3 (x) =xQx T + Lx T + e, 

where Q is the all ones upper triangular binary m x m matrix with zeroes in the diagonal, L is 
the all ones binary vector of length m and e = 1. □ 

Proposition 2.3 Bent function /o,i is complementary (hence, affine equivalent) to ^2,3? as well 
as fo,3 is complementary (affine equivalent) to f\^- Bent functions /o,i and /o,3 are affine equiv- 
alent to each other, if and only if m is a multiple of A. 

Proof. The fact that /o,i is complementary to ^2,3, as well as /o,3 is complementary to fi t 2, comes 
from the definition of these functions. 

Consider the functions fo,i, fo,3 and define the map tp : F™ — > F^, which swaps zeroes and 
ones of binary vectors x of length m, so ^(x) = x + u = x, where u is the all ones vector 
in F™. Then, /o,i( x ) = /o,3( x ) if and only if m is a multiple of 4. Indeed, let wt4(x) be the 
weight of x modulo 4. We have /o,i( x ) = 1 if and only if wt 4 (x) G {0, 1} and /o,3( x ) = 1 if and 
only if wt4(x) G {m^, (m — 3)4}, where m^, (m — 3)4 stands for the value, modulo 4, of m and 
m — 3, respectively. Now is clear that {0, 1} = {m^, (771 — 3)4} if and only if m is a multiple of 4. □ 

We have to notice that the function / ,i and its complementary / 2 ,3 has been constructed 
in [6] in terms of abelian difference sets, known also as Menon difference sets (see [1]). Since 
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functions /o,i an d /o,3 are not equivalent to each other when m is not a multiple of 4, it might 
be interesting their study from the point of view of difference sets. 



Theorem 2.4 

Form = 0,4 (mod 8), the functions fi lt i 2 are neither self- dual functions nor anti-self-dual. 
Form = 2 (mod 8), ^3 and /o,i are self-dual. The function /o,3 is anti- self- dual (with f\$). 
Form = 6 (mod 8), f 1>2 and / ,3 are self-dual. The function / 2 ,3 is anti- self- dual (with fo,i)- 

Proof. It is known [31 Th. 4.1] that if / is a self-dual bent or anti-self-dual bent quadratic 
boolean function then the symplectic matrix Q + Q T associated to / (j3J) is an involution, hence 
(Q + Q T ) 2 = I {I is the identity matrix of order m). Later, Hou [SJ Th. 2.1], extended this 
property to a necessary and sufficient condition in the sense that / is self-dual or anti-self-dual if 
and only if (Q + Q T ) 2 = I, and (Q + Q T )Q(Q + Q T ) + Q T is an alternating matrix (so, a matrix 
of the form A + A T , where A is a square matrix over F 2 ). 

In all cases of our functions fi lt i 2 the symplectic matrix Q + Q T coincides with J + I, where 
J is the m x m matrix with ones in all the entries and Q is the all ones upper triangular binary 
m x m matrix with zeroes in the diagonal (j3J). 

Hence, (Q + Q T ) 2 = ( J + I) 2 = J 2 + I = I (the last equality is true since m is even). 

For the second condition we have 



is even and = when % + j is odd. Therefore, JQ + QJ = A + A T + J, for some A. 



(Q + Q T )Q(Q + Q T ) + Q T 
(J + I)Q(J + /) + Q T 
JQJ + JQ + QJ + Q + Q T 




Taking into account that m is even we see that (™) J is the zero matrix if and only if m = 
(mod 4). In all other cases (X) J = J- We also have JQ + QJ = (ay), where = 1 when i + j 
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Finally, 

(Q + Q T )Q(Q + Q T ) + Q T 
= \j2j J + A + A T + I + Q + Q T 

^jJ+(A + Q) + (A + Q) T + 1, 

which is an alternating matrix if and only if m ^ (mod 4) and so, we conclude that fi lt i 2 is a 
self-dual or anti-self-dual quadratic bent function if and only if m ^ (mod 4). 

Now that we know in what cases fi lt i 2 is a self-dual or anti-self-dual quadratic bent function we 
can check the self-duality or anti-self-duality condition, for each pair (11,12)- It is not necessary 
to check that the dual bent function fi u i 3 coincides with f ilA2 or with the complement / il i2 , it 
is enough to check if the first coordinate in fi u i 2 coincides with the first coordinate in f% lt i 2 to 
decide about self-duality or anti-self-duality. 

Let us begin by computing 

*ii,«(0) = (-l) /l - l2(x)+ °- x = (-l) /ll,la(x) = 2 m - 2wt(4, i2 ) 

and note that wt(/j 1> j 2 ) depends on the value of the pair (ii,i 2 ). 

Using Proposition 11.11 we have the following values for wt(/j 1)i2 ) = S(ii) m + 5 , (i 2 ) m , where 



wt (/il,i 2 ) 


m = 2 (mod 8) 


m = 6 (mod 8) 


(ii,i 2 ) = (0,l) 


25 m + 5 m 


25 m - B m 


(zi,z 2 ) = (2,3) 


25 m - S m 


2£? m + £? m 


(ii,z 2 ) = (0,3) 


25 m - S m 


25 m + B m 


(ii,i 2 ) = (l,2) 


25 m + 5 m 


2B f n - B m 



With the above results we can compute F ilti2 (0), which is always ±2 m ' 2 , and also fi u i 2 (0), 
which is in {0, 1} depending on the value of Fj lii2 (0). 

Now we put in the following tables the values of fi u % 2 (0) and fi u i 2 (0). When these values 
coincide we conclude that fi^i 2 is self-dual, otherwise fi u i 2 is anti-self-dual. 
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L,iM 


m = 2 (mod 8) 


m = 6 (mod 8) 




m = 2 (mod 8) 


m = 6 (mod 8) 


(*1,»2) = (0,1) 


1 





(ii,i 2 ) = (0,l) 


1 


1 


(*i,»2) = (2,3) 





1 


(ii,i 2 ) = (2,3) 








(ii,i 2 ) = (0,3) 





1 


(ii,i 2 ) = (0,3) 


1 


1 


(k,l2) = (1,2) 


1 





(ii,i 2 ) = (1,2) 









Theorem 2.5 For any even m > 4 £/ie bent functions fi lt i 2 , where i± — i 2 = 1 (mod 2) are noi 
o/ i/ie Maiorana-McFarland type. 

Proof. Let us prove the statement by using contradiction. Assume that /j 1; j 2 is of Maiorana- 
McFarland type. This means that a binary variable vector z, of length m, can be divided into 
two subvectors x and y of the same length m/2 such that 

/ il)i2 (z) = x-y9(y)+#(y), 

where is a permutation of F™^ 2 and p(y) is some boolean function. Note that x and y run 
over all the 2 m / 2 • 2 m l 2 possible values. Consider the set of values of f il:i2 (z) when x runs over 
all the values in F™^ 2 and y is fixed to be y = y , such that y?(yo) is the zero vector. In this 
case x ■ y?(yo) = and /^^(z) = <?(yo) is a constant. Since x is running over F?^ 2 its weight 
takes m/2 + 1 > 2 different consecutive values. Hence, it takes more than 2 different values of 
weight modulo 4 and, for all these values, the function fi 1: i 2 (z) is constant. This contradicts the 
definition of the function fi lt i 2 . □ 
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